Provisional support for TLS v1.2 client authentication: client side only.

[thirdparty/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 5f418694bc8e5df2b7192d8fac9d19d835e0dbe6..c5ae9cf1d30519deee389aca4c45fcc28488a376 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,11 @@
 
  Changes between 1.0.0d and 1.0.1  [xx XXX xxxx]
 
+  *) Add TLS v1.2 client side support for client authentication. Keep cache
+     of handshake records longer as we don't know the hash algorithm to use
+     until after the certificate request message is received.
+     [Steve Henson]
+
   *) Initial TLS v1.2 client support. Add a default signature algorithms
      extension including all the algorithms we support. Parse new signature
      format in client key exchange. Relax some ECC signing restrictions for